Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142833.roa
File: AS142833.roa (raw, json)
Hash identifier: d5DaGhilzXKIRq1svkOJiVzIvKmpkl1/ul2tAvyCSSI=
Subject key identifier: 0A:D1:84:10:F0:E8:CA:98:97:3C:F7:D4:A5:FF:63:EB:51:BD:89:28
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 574319198771ED3072DD7CC2078AA5003C647965
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142833.roa
Signing time: Fri 22 May 2026 06:27:45 +0000
ROA not before: Fri 22 May 2026 06:22:45 +0000
ROA not after: Fri 21 May 2027 06:27:45 +0000
asID: 142833
IP address blocks: 240a:a0b7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:43:19:19:87:71:ed:30:72:dd:7c:c2:07:8a:a5:00:3c:64:79:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:45 2026 GMT
Not After : May 21 06:27:45 2027 GMT
Subject: CN=0AD18410F0E8CA98973CF7D4A5FF63EB51BD8928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:aa:a4:5f:bb:f2:51:c3:e9:65:fd:6a:0e:59:
5b:36:90:9b:00:47:f5:62:9d:51:df:43:65:a5:7a:
c5:e0:64:ef:9d:14:ef:dc:85:79:19:8e:5e:a2:9f:
2b:b0:62:c1:ff:37:f0:8d:3c:42:9a:82:a3:2e:c2:
53:34:7f:06:c4:64:6c:77:5a:a0:55:bc:25:56:35:
ce:28:ec:84:12:fc:95:9f:21:c0:cc:a1:39:d5:9c:
c4:1b:4a:71:03:a8:f6:ee:f6:6b:31:9f:ac:e1:f5:
08:8b:8b:28:25:70:b4:1b:56:85:4f:a9:54:25:c9:
39:37:88:08:f4:e1:9f:e0:db:68:c3:a8:d7:40:73:
ab:03:79:2f:59:f2:08:73:74:fd:21:1a:b2:2c:aa:
1b:87:ab:1e:c7:34:72:cd:32:04:b7:55:b1:99:1c:
25:e3:8b:34:8d:f0:6f:5c:eb:2e:40:4f:c9:72:bb:
34:61:9f:3a:20:9e:27:fa:ff:da:43:b3:39:47:e0:
ac:f4:9b:18:7b:79:8b:37:75:28:4a:cf:b3:34:8f:
7f:f9:9f:32:78:12:18:71:c4:98:3e:d2:84:b2:01:
31:65:18:1b:22:ad:c0:7a:ea:ac:4d:ce:48:13:fb:
b0:61:0d:00:dc:10:fe:37:05:18:93:ee:b1:cc:da:
01:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D1:84:10:F0:E8:CA:98:97:3C:F7:D4:A5:FF:63:EB:51:BD:89:28
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0b7::/32
Signature Algorithm: sha256WithRSAEncryption
4e:ea:39:af:0e:6e:b8:6c:05:66:72:76:5c:c2:58:22:28:8d:
c6:bc:3c:48:33:24:e8:4f:e8:32:dd:cd:af:0f:c9:e3:ca:15:
fc:16:1c:54:15:9d:c8:1c:32:1a:c8:33:9c:1d:48:9f:41:33:
9d:c9:ec:e2:f5:d9:5b:05:54:92:2b:9f:05:11:89:fc:c6:cf:
c6:99:33:c5:7d:64:c0:74:cd:94:33:0f:ed:83:53:11:9d:b4:
94:23:95:a2:11:0d:8e:b1:d9:25:aa:1a:a7:c2:22:b7:43:59:
66:07:29:1a:a9:e0:82:11:b4:f1:a2:9a:dd:96:ca:6e:00:e8:
d3:10:15:56:d5:d6:b4:18:6e:d9:00:44:3c:54:59:bb:df:f5:
99:8f:ab:0c:b1:1d:13:a1:bf:e8:ce:dd:3e:80:3a:8c:2d:01:
16:a7:88:f3:a5:b1:d6:ee:7d:a5:49:0b:f9:eb:b2:3e:9d:f6:
c8:8b:db:5a:cf:52:30:cd:fd:2b:9a:f8:e9:22:95:8b:92:ec:
11:0c:79:c7:ac:71:81:fe:23:97:86:9d:28:25:43:b5:81:5f:
2f:41:9d:54:4d:b2:dd:7b:fe:a1:00:56:f0:b0:b9:79:5b:41:
2d:0e:92:a0:1d:f8:cd:cb:58:03:ca:6f:1d:36:d6:03:e2:55:
9d:61:c0:f5
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUV0MZGYdx7TBy3XzCB4qlADxkeWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyNDVaFw0yNzA1MjEwNjI3NDVaMDMxMTAvBgNV
BAMTKDBBRDE4NDEwRjBFOENBOTg5NzNDRjdENEE1RkY2M0VCNTFCRDg5MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqqRfu/JRw+ll/WoOWVs2kJsA
R/VinVHfQ2WlesXgZO+dFO/chXkZjl6inyuwYsH/N/CNPEKagqMuwlM0fwbEZGx3
WqBVvCVWNc4o7IQS/JWfIcDMoTnVnMQbSnEDqPbu9msxn6zh9QiLiyglcLQbVoVP
qVQlyTk3iAj04Z/g22jDqNdAc6sDeS9Z8ghzdP0hGrIsqhuHqx7HNHLNMgS3VbGZ
HCXjizSN8G9c6y5AT8lyuzRhnzognif6/9pDszlH4Kz0mxh7eYs3dShKz7M0j3/5
nzJ4EhhxxJg+0oSyATFlGBsircB66qxNzkgT+7BhDQDcEP43BRiT7rHM2gF3AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUCtGEEPDoypiXPPfUpf9j61G9iSgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgtzANBgkqhkiG9w0BAQsFAAOCAQEATuo5
rw5uuGwFZnJ2XMJYIiiNxrw8SDMk6E/oMt3Nrw/J48oV/BYcVBWdyBwyGsgznB1I
n0Ezncns4vXZWwVUkiufBRGJ/MbPxpkzxX1kwHTNlDMP7YNTEZ20lCOVohENjrHZ
Jaoap8Iit0NZZgcpGqngghG08aKa3ZbKbgDo0xAVVtXWtBhu2QBEPFRZu9/1mY+r
DLEdE6G/6M7dPoA6jC0BFqeI86Wx1u59pUkL+euyPp32yIvbWs9SMM39K5r46SKV
i5LsEQx5x6xxgf4jl4adKCVDtYFfL0GdVE2y3Xv+oQBW8LC5eVtBLQ6SoB34zctY
A8pvHTbWA+JVnWHA9Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:27 2026 by rpki-client